2024-04-02 12:04:20
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇦🇺
MAGIC
2024-03-28 09:00:29
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇪🇸
10dencehispahard SL
2024-03-22 04:00:12
(2 years ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
2024-03-19 18:32:37
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-03-19 07:24:33
(2 years ago)
Malicious activity detected
Hacking
Web App Attack
2024-03-18 17:45:34
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2024-03-17 22:48:28
(2 years ago)
(mod_security) mod_security (id:217200) triggered by 5.253.118.87 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:217200) triggered by 5.253.118.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 17 18:48:25.513233 2024] [security2:error] [pid 4071] [client 5.253.118.87:49191] [client 5.253.118.87] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||www.crescendoconsultltd.com|F|2"] [data "/wp-json/contact-form-7/v1/contact-forms/5/feedback"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.crescendoconsultltd.com"] [uri "/wp-json/contact-form-7/v1/contact-forms/5/feedback"] [unique_id "ZfdzOdc3N3Hpoa_ryqTrGAAAAAE"], referer: https://www.crescendoconsultltd.com/contact-us/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-17 09:03:54
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 5.253.118.87 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 5.253.118.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 17 05:03:49.152152 2024] [security2:error] [pid 2721665:tid 47759613908736] [client 5.253.118.87:58623] [client 5.253.118.87] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||iamfluff.com|F|2"] [data ".iamfluff.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "iamfluff.com"] [uri "/ftp:/ftp.iamfluff.com"] [unique_id "Zfax9US8g8GwgXzvoQFqxgAAAcs"], referer: http://iamfluff.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-03-16 09:08:14
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2024-03-14 14:21:42
(2 years ago)
(mod_security) mod_security (id:217200) triggered by 5.253.118.87 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:217200) triggered by 5.253.118.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 14 10:21:39.057371 2024] [security2:error] [pid 21311] [client 5.253.118.87:39682] [client 5.253.118.87] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||www.celebrationofmike.com|F|2"] [data "/cms/contact"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.celebrationofmike.com"] [uri "/cms/contact"] [unique_id "ZfMH85mVqI7u-9p3vqxbTQAAAA0"], referer: https://www.celebrationofmike.com/cms/contact
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-03-13 01:22:43
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-03-10 06:23:45
(2 years ago)
Malicious activity detected
Hacking
Web App Attack
🇦🇺
MAGIC
2024-03-08 04:07:56
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇯🇵
pgpedia
2024-03-03 23:39:00
(2 years ago)
"
Dear Webmaster,
I trust this email finds you well. I'm reaching out to introduce you to an ...
show more
"
Dear Webmaster,
I trust this email finds you well. I'm reaching out to introduce you to an exclusive opportunity that could significantly enhance your online revenue streams - Legend Affiliates
Legend Affiliates is not just an affiliate program"
show less
Web Spam
🇺🇸
TPI-Abuse
2024-02-29 01:29:09
(2 years ago)
(mod_security) mod_security (id:217200) triggered by 5.253.118.87 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:217200) triggered by 5.253.118.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 28 20:29:03.784089 2024] [security2:error] [pid 16110] [client 5.253.118.87:42072] [client 5.253.118.87] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||nextlevelcharge.com|F|2"] [data "/contact-us/"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "nextlevelcharge.com"] [uri "/contact-us/"] [unique_id "Zd_d33E76EB7osgTMJBdaAAAAAk"], referer: https://nextlevelcharge.com/contact-us/
show less
Brute-Force
Bad Web Bot
Web App Attack